Microsoft 365 accounts compromised at 79 organizations without a single guessed password
Help Net Security · · Medium severity
An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The...